[kanade]

Well . I change my old computer keeps Blue Screening so i've decided to change the parts . Days come and still no BSOD . Until now , just by watching anime , it just suddenly occur . i've use BlueScreenView to see the driver that causing it and the driver was NTKRNLPA.EXE . and i dont like many programs install on my pc so i dont install as much as possible . i only install drivers and on my other harddrive was just games . ANY HELP ?  091513-15178-01.rar   23.93KB   158 downloads

[Advertisements]

Download Autoruns and Autorunsc
http://download.sysi...es/Autoruns.zip
Unzip it to your desktop and then double click autoruns.exe After the scan is finished then click on File>>>>>>>>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option. in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.



Download Security Check by screen317 from here.
http://screen317.spy...curityCheck.exe
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

[rockmilk]

Download Autoruns and Autorunsc
http://download.sysi...es/Autoruns.zip
Unzip it to your desktop and then double click autoruns.exe After the scan is finished then click on File>>>>>>>>>>>Save The default name will be autoruns.arn make sure to save it as Autoruns.txt under the file type option. in other words make sure it is a .txt file instead of .arn Attach the text in your next reply.



Download Security Check by screen317 from here.
http://screen317.spy...curityCheck.exe
Save it to your Desktop.
Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
A Notepad document should open automatically called checkup.txt; please post the contents of that document.

[kanade]

thnks for your reply . well , these are the results i got.



 AutoRuns.txt   34.04KB   163 downloads
 checkup.txt   778bytes   144 downloads

[rockmilk]

Results of screen317's Security Check version 0.99.73
Windows 7 Service Pack 1 x86 (UAC is enabled)
Internet Explorer 10
``````````````Antivirus/Firewall Check:``````````````
Windows Security Center service is not running! This report may not be accurate!
Windows Firewall Enabled!
WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
Google Chrome 29.0.1547.66
````````Process Check: objlist.exe by Laurent````````
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 0%
````````````````````End of Log``````````````````````

[rockmilk]

Can you upload your dump files and a minitoolbox log and fss please.
http://h30434.www3.h...les/td-p/253475


Please download FarbarServiceScanner and run it on the computer with the issue.
http://download.blee.../farbar/FSS.exe


Make sure the following options are checked:
Internet Services
Windows Firewall
System Restore
Security Center/Action Center
Windows Update

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.

Please download MINITOOLBOX and run it.
http://download.blee...MiniToolBox.exe

Checkmark following boxes:



Flush DNS
Reset FF proxy Settings
Reset Ie Proxy Settings
Report IE Proxy Settings
Report FF Proxy Settings
List content of Hosts
List IP configuration
List Winsock Entries
List last 10 Event Viewer log
List Installed Programs
List Users, Partitions and Memory size
List Devices (problems only)



Click Go and post the result.

[rockmilk]

*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PAGE_FAULT_IN_NONPAGED_AREA (50)
Invalid system memory was referenced. This cannot be protected by try-except,
it must be protected by a Probe. Typically the address is just plain bad or it
is pointing at freed memory.
Arguments:
Arg1: dc0dd848, memory referenced.
Arg2: 00000000, value 0 = read operation, 1 = write operation.
Arg3: 82b0cccc, If non-zero, the instruction address which referenced the bad memory
address.
Arg4: 00000002, (reserved)

Debugging Details:
------------------

TRIAGER: Could not open triage file : e:\dump_analysis\program\triage\modclass.ini, error 2

READ_ADDRESS: GetPointerFromAddress: unable to read from 82baf848
Unable to read MiSystemVaType memory at 82b8ee20
dc0dd848

FAULTING_IP:
nt!RtlSubtreePredecessor+15
82b0cccc 8b4808 mov ecx,dword ptr [eax+8]

MM_INTERNAL_CODE: 2

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: WIN7_DRIVER_FAULT

BUGCHECK_STR: 0x50

PROCESS_NAME: chrome.exe

CURRENT_IRQL: 0

TRAP_FRAME: 9f593928 -- (.trap 0xffffffff9f593928)
ErrCode = 00000000
eax=dc0dd840 ebx=00000000 ecx=872b0748 edx=00000000 esi=00850000 edi=dc0ed840
eip=82b0cccc esp=9f59399c ebp=9f59399c iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00010282
nt!RtlSubtreePredecessor+0x15:
82b0cccc 8b4808 mov ecx,dword ptr [eax+8] ds:0023:dc0dd848=????????
Resetting default scope

LAST_CONTROL_TRANSFER: from 82a87468 to 82ad43bf

STACK_TEXT:
9f593910 82a87468 00000000 dc0dd848 00000000 nt!MmAccessFault+0x106
9f593910 82b0cccc 00000000 dc0dd848 00000000 nt!KiTrap0E+0xdc
9f59399c 82b0c9fc 00850000 856c6174 00850000 nt!RtlSubtreePredecessor+0x15
9f5939b4 8bfac839 00850000 dc0ed840 00850000 nt!RtlDeleteNoSplay+0x20
9f5939c8 8bfacaf4 00850000 856c6164 86123a80 fltmgr!TreeUnlinkNoBalance+0x13
9f5939e0 8bfc0208 856c6174 ffffffff ffffffff fltmgr!TreeUnlinkMulti+0x22
9f593a00 8bfc0953 856c6130 00008000 ffffffff fltmgr!DeleteNameCacheNodes+0x84
9f593a28 8bfc09f5 861236c8 856c6130 00000000 fltmgr!PurgeStreamNameCache+0x87
9f593a50 8bfc0bb5 861236c8 00000000 854faeb8 fltmgr!FltpPurgeVolumeNameCache+0x77
9f593a6c 8bfc11c9 863c7900 854bb338 00000000 fltmgr!FltpReinstateNameCaching+0x65
9f593a8c 8bfa7b40 861236c8 854bb338 00000000 fltmgr!FltpReinstateNameCachingAllFrames+0x45
9f593aac 82abe913 86128a10 8551b5f8 854faeb8 fltmgr!FltpPassThroughCompletion+0x92
9f593af4 8c216c26 0000000a a691ed08 854e8cd0 nt!IopfCompleteRequest+0x128
9f593b0c 8c2b9f77 854e8cd0 8551b5f8 00000000 Ntfs!NtfsExtendedCompleteRequestInternal+0x107
9f593b84 8c20f17f 854e8cd0 8551b5f8 137ac16a Ntfs!NtfsCommonSetInformation+0x84d
9f593bf0 82a7d5be 86171020 8551b5f8 8551b5f8 Ntfs!NtfsFsdSetInformation+0x107
9f593c08 8bfa820c 86128a10 8551b5f8 00000000 nt!IofCallDriver+0x63
9f593c2c 8bfa83cb 9f593c4c 86128a10 00000000 fltmgr!FltpLegacyProcessingAfterPreCallbacksCompleted+0x2aa
9f593c64 82a7d5be 86128a10 8551b5f8 00000000 fltmgr!FltpDispatch+0xc5
9f593c7c 82c9e3aa b16c203a 00000e2c 03c9f5b8 nt!IofCallDriver+0x63
9f593d18 82a8427a 00000e2c 03c9f630 002ae8a0 nt!NtSetInformationFile+0xa3f
9f593d18 77687094 00000e2c 03c9f630 002ae8a0 nt!KiFastCallEntry+0x12a
WARNING: Frame IP not in any known module. Following frames may be wrong.
03c9f670 00000000 00000000 00000000 00000000 0x77687094


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!RtlSubtreePredecessor+15
82b0cccc 8b4808 mov ecx,dword ptr [eax+8]

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!RtlSubtreePredecessor+15

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrpamp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4f766ae5

FAILURE_BUCKET_ID: 0x50_nt!RtlSubtreePredecessor+15

BUCKET_ID: 0x50_nt!RtlSubtreePredecessor+15

Followup: MachineOwner'

It is a bit difficult to make an assement with only one dump file.

[kanade]

Thanks for your reply !

 minidump.rar   95.19KB   145 downloads
 FSS.txt   1.84KB   154 downloads
 Result.txt   20.19KB   213 downloads


bsod occurs everyday with same reason . but yesterday . got 2 bsod but the first bsod have a different reason .

Edited by kanade, 20 September 2013 - 09:37 PM.

[rockmilk]

Your crashes are pointing toward system corruption Also you do not have an antivirus installed.

Error: (09/20/2013 04:37:42 PM) (Source: atapi) (User: )
Description: The driver detected a controller error on \Device\Ide\IdePort3.

I suggest you install Avast free and run a full scan.
Also run a check disk on your machine from elevated command with the code below.

chkdsk /r

[kanade]

do i have to submit to you the results ?

[rockmilk]

Where there any errors?

Here is a tool made by a member here which will simplify the process for you.


download ListChkdskResult by SleepyDude
https://dl.dropboxus...hkdskResult.exe
execute the file and accept all the windows prompts to authorize the program to run
Notepad will open with a report showing the chkdsk result
copy & paste the log to your reply

[rockmilk]

As far as the Avast result if something was found I suggest you create a thread in the virus and spyware removal area as security logs are not allowed in this area.

[kanade]

im just starting to do a full system scan using avast.

what if there are no errors ?

[kanade]

this is the result i got from chkdsk


 ListChkdskResult.txt   4.55KB   178 downloads

[rockmilk]

im just starting to do a full system scan using avast.

what if there are no errors ?

Then please do the following.

Download the All in one Repair Tool Run the program vista/win 7 users please right click and run as admin. Go to step 4 and create a backup of your registry this tool involves changing registry keys and it is just a good idea to bak it up.Now go to the start repairs tab and run it with the following boxes checked.When running this tool disable your antivirus.


Reset Registry Permissions
Reset File Permissions
Register System Files
Repair WMI
Repair Windows FireWall
Repair Internet Explorer
Repair MDAV/MS Jet
Repair Hosts Files
Remove Policies Set By Infections
Repair Winsock & Dns Cache
Remove Temp Files
Repair Proxy Settings
Set Windows Services To DEfault Startup
Repair MSI (Windows Installer)

Reboot the machine and let us know if the machine crashes again.

Also install Ccleaner just do not use the registry cleaner ever!!!
Run the cleaner this will clear all the old .dmp files and if the machine crashes again upload the new dump files for review just let the machine crash at least twice before doing so.

[kanade]

thnks . ill try that now.

Just to let you know , Avast didn't found any threats .